Hi All,
Like the OP, I am configuring my first srx300.
Have upgraded the software to
Hostname: fw01
Model: srx300
Junos: 15.1X49-D70.3
JUNOS Software Release [15.1X49-D70.3]
My problem is that I am unable to reach / ping the IRB interface ( ip address ).
Is this a normal behaviour ?
At this version of the OS, is the IRB interface routable now ?
Can I use it as the gateway.
All the ports in the vlans ( vlan trust) are up
admin@fw01# run show vlans
Routing instance VLAN name Tag Interfaces
default-switch default 1
ge-0/0/3.0
ge-0/0/4.0
default-switch trust 10
ge-0/0/1.0*
ge-0/0/2.0*
admin@fw01# show vlans
trust {
vlan-id 10;
interface ge-0/0/1.0;
interface ge-0/0/2.0;
l3-interface irb.0;
}
IRB 0 is in the trust security zone and ping host bound traffic are allowed.
pcadmin@jr-fw01# run show interfaces irb
Physical interface: irb , Enabled, Physical link is Up
Interface index: 130, SNMP ifIndex: 502
Type: Ethernet, Link-level type: Ethernet, MTU: 1514
Device flags : Present Running
Interface flags: SNMP-Traps
Link type : Full-Duplex
Link flags : None
Current address: 40:71:83:2b:06:30, Hardware address: 40:71:83:2b:06:30
Last flapped : Never
Input packets : 0
Output packets: 0
Logical interface irb.0 (Index 72) (SNMP ifIndex 532)
Flags: Up SNMP-Traps 0x0 Encapsulation: ENET2
Bandwidth: 1000mbps
Routing Instance: default-switch Bridging Domain: trust
Input packets : 192
Output packets: 6
Security: Zone: trust
Allowed host-inbound traffic : bootp bfd bgp dns dvmrp igmp ldp msdp nhrp
ospf pgm pim rip router-discovery rsvp sap vrrp dhcp finger ftp tftp
ident-reset http https ike netconf ping reverse-telnet reverse-ssh rlogin
rpm rsh snmp snmp-trap ssh telnet traceroute xnm-clear-text xnm-ssl lsping
ntp sip r2cp webapi-clear-text webapi-ssl
Protocol inet, MTU: 1500
Flags: Sendbcast-pkt-to-re
Addresses, Flags: Is-Preferred Is-Primary
Destination: 10.12.8/24, Local: 10.12.8.1, Broadcast: 10.12.8.255
But no luck with the ping
@rain:firmware[542]$ ping 10.12.8.1
PING 10.12.8.1 (10.12.8.1): 56 data bytes
ping: sendto: No route to host
ping: sendto: Host is down
Request timeout for icmp_seq 0
ping: sendto: Host is down
Request timeout for icmp_seq 1
ping: sendto: Host is down
Request timeout for icmp_seq 2
ping: sendto: Host is down
Request timeout for icmp_seq 3
^C
What else could be missing ?
thanks in advance !